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E-commerce : digital signature technology 

Zhou, Tao 

Windows NT , February 1, 1999 , n42 p75-80, 5 Page(s) 
ISSN: 1083-138X 
Languages : English 

Document Type: Articles, News & Columns 
Geographic Location: United States 

Describes digital signature technology and its role in electronic 
commerce. Explains message hashing and encryption, how public and private 
keys work, and two public key trust models, direct and third-party. 
Discusses how the third-party model uses the Certificate Authority (CA) , a 
trustworthy organization that certifies public keys and publishes the 
Certificate Revocation List (CRL) . Examines the use of time stamping to 
guarantee a document's validity . Reports on the functions of several 
software produ have included digital signature functionality into their se 
applications. Suggests how to determine the appropriate digital signature 
solution, including public key infrastructure (PKI) decisions and where to 
publish CA information. Includes diagram, one screen display, and one 
sidebar, (amg) 

Descriptors: Electronic Commerce; Digital Certificates ; Security; 
Privacy 
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XRPX Acc No: N97-257508 

Certificate management in cryptographic system - producing string 

indicating that certificate is still valid and sending it to requesting 

user to validate communication 
Patent Assignee: MICALI S (MICA-I) 
Inventor: MICALI S 

Number of Countries: 019 Number of Patents: 001 
Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

WO 9720411 Al 19970605 WO 96US18476 A 19961118 199728 B 

Priority Applications (No Type Date) : US 95559533 A 19951116 
Cited Patents: US 5261002; US 5450493 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
WO 9720411 Al E 34 H04L-009/00 

Designated States (National) : CA JP 

Designated States (Regional) : AT BE CH DE DK ES FI FR GB GR IE IT LU MC 
NL PT SE 

Abstract (Basic): WO 9720411 A - 

The method of managing certificates in a communication system 
having a certifying authority involves having the certifying authority 
generate certificates by digitally signing a given piece of data. At 
a later point in time, the certifying authority produces a string that 
proves whether a particular certificate is currently valid without 
.and also proving the validity of at least some other certificates . 

Preferably, the certifying authority provides the string to a third 
party who can then prove to a requesting party whether the particular 
certificate is currently valid without proving the validity of at 
least some other certificates . 

USE/ADVANTAGE - Facilitates management of public key certificate 
revocation without providing users with lists of revoked certificates 
. User receives specific information rather than large list. 

Dwg.1/1 

Title Terms: CERTIFY; MANAGEMENT; CRYPTOGRAPHIC; SYSTEM; PRODUCE; STRING; 
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Derwent Class: W01 

International Patent Class JMain) : H04L-009/00 
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Public key certificate revocation method for electronic commerce, 
involves embedding terminal hash value into public key certificate 

Patent Assignee: SUDIA F W (SUDI-I) 

Inventor: SUDIA F W 

Number of Countries: 094 Number of Patents: 002 
Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

WO 200106701 Al 20010125 WO 2000US19163 A 20000714 200142 B 

AU 200060970 A 20010205 AU 200060970 A 20000714 200142 

Priority Applications (No Type Date): US 99168002 P 19991130; US 99143852 P 
19990715; US 99147696 P 19990806; US 99149315 P 19990817; US 99154088 P 
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Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 

WO 200106701 Al E 76 H04L-009/30 

Designated States (National) : AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA 
CH CN CR CU CZ DE DK DM DZ EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP 
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Designated States (Regional) : AT BE CH CY DE DK EA ES FI FR GB GH GM GR 
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AU 200060970 A H04L-009/30 Based on patent WO 200106701 

Abstract (Basic) : WO 200106701 Al 

NOVELTY - The certification authority request and receives 
terminal hash value (THV) corresponding to initial random value from an 
independent revocation service provider entity. The THV is embedded 
into public key certificate and private key digitally signs the 
certificate . An entity requests revocation from provider which ceases 
publication of valid periodic freshness indicator updates for the 
certificate . 

USE - For controlling access to data and network resource to 
provide privacy and authentication of data in electronic commerce on 
Internet . 

ADVANTAGE - Allows user to access numerous sources of web content 
such as stock market or industry research without needing to know or 
remember different login IDs and password for each service because 
tickets are provided in the weekly expiration dates. 

DESCRIPTION OF DRAWING (S) - The figure shows the schematic 
representation of public key' certificate revocation method. 
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Title Terms: PUBLIC; KEY; CERTIFY; METHOD; ELECTRONIC; EMBED; TERMINAL; 

HASH; VALUE; PUBLIC; KEY; CERTIFY 
Derwent Class: T01; T05; W01 

International Patent Class (Main) : H04L-009/30 
File Segment: EPI 
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Public key certificate management method in communication system, 
involves producing string which proves validity of particular 
certificate without proving validity of other certificate 

Patent Assignee: MICALI S (MICA-I); CORESTREET LTD (CORE-N) 



Inventor: MICALI S 

Number of Countries: 001 Number of Patents: 002 
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Cont of application US 95559533 
Cont of application US 97823354 
Cont of application US 99356745 
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Cont of patent US 5960083 
CIP of patent US 6292893 
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CIP of application US 2000483125 
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CIP of patent US 6292893 

Abstract (Basic) : US 20020107814 Al 

NOVELTY - The certificates for users' public keys are produced by 
a certifying authority, after digitally signing in the data. The 
certifying authority produces a string which proves the current 
validity of a particular certificate , without proving validity of 
other certificates . 

'DETAILED DESCRIPTION - INDEPENDENT CLAIMS are included for the 
following: 

(1) Off-line digital signing method; and 

(2) Digital signature validity extension method. 

USE - For managing certificate in communication system to certify 
users ' public keys . 

ADVANTAGE - Facilitates management of public key certificate 



revocation without providing users with list of revoked certificates . 
Reduces cost for managing the certificates by reducing size and 
number of transmissions of certificate revocation lists among 
participants in management scheme. Improves efficiency, since the 
certifying authorities provide certificate validity information 
without requiring a trusted directory. Prevents re-signing the 
certificate by providing different one-time signature scheme, thereby 
improving security. 

DESCRIPTION OF DRAWING { S ) - The figure shows the communication 
environment illustrating certificate management process. 
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File Segment: EPI 



5/5/9 (Item 4 from file: 350) 

DIALOG (R) File 350:Derwent WPIX 

(c) 2004 Thomson Derwent. All rts. reserv. 

014292367 **Image available** 

WPI Acc No: 2002-113069/200215 

XRPX Acc No: N02-084169 

Modules registering method for computer system, involves granting or 
denying access to module, when module is judged to comply with access 
requirements 

Patent Assignee: STILES INVENTIONS LLC (STIL-N) 

Inventor: STILES I J 

Number of Countries: 001 Number of Patents: 001 
Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 
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Priority Applications (No Type Date) : US 97828721 A 19970331 
Patent Details : 

Patent No Kind Lan Pg Main IPC Filing Notes 
US 6330608 Bl 6 G06F-013/00 

Abstract (Basic) : US 6330608 Bl 

NOVELTY - A module loaded into a computer memory is checked for 
compliance with the requirements for accessing the computer system. The 
module is checked for byte code validity to determine whether the 
module includes the required trademarked string. If the module complies 
with requirement for access, access to module is granted, otherwise 
denied. 

USE - For registering modules to control access to computer 
systems, software, databases. 

ADVANTAGE - Enables validating a service provider for accessing the 
computer system to check for computer viruses, version incompatibility 
and omission of agreement strings. Protects the ownership rights of 
computer system. Recognizes the valid, registered service providers 
without incurring the costs and inefficiencies of digital signature 
encoding, special purpose hardware devices, proprietary interfaces. 

DESCRIPTION OF DRAWING (S) - The figure shows a detailed flowchart 
explaining the module registering process. 
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